Privacy Policy

Castkoi ("the App", "we", "us", "our"), operated by Tranquil Mind Technology JSC, respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the App, you agree to this Policy.

Castkoi is a media player for IPTV playlists that you add yourself (M3U/M3U8 links, Xtream logins, or playlist files on your device). You can cast what you watch to a TV. You do not need to create an account to use it, and we do not ask for your name, email address, phone number, or payment details.

1. Information we collect

1.1 Information stored only on your device

The following stays on your device. We do not receive it or store it on our servers:

• Playlists and sources you add. This includes M3U/M3U8 links, playlist files, and Xtream server addresses, usernames, and passwords.
• Your activity inside the App. This includes favorites, collections, watch history, continue-watching progress, and recent searches.
• Your settings. This includes your language choice and parental-control settings. Your parental-control PIN is stored only as a one-way hash.
• Local video files. Any video you choose to play from your device is played on your device. We never upload it.

You can remove this information at any time. Delete playlists, clear your history, or free up cache in the App, or uninstall the App.

1.2 Information collected automatically

When you use the App, our third-party service providers collect the following automatically (see Section 3):

• Device and advertising identifiers. This includes the Android Advertising ID, the Firebase installation ID, and SDK-generated identifiers.
• App interactions. This includes screens viewed and onboarding steps completed (for example, which interests you tap during onboarding), plus ad impressions and clicks.
• Approximate location. This is derived from your IP address. The App does not request GPS or precise-location permission.
• Information about apps on your device. The App checks which installed apps can open a video stream, so it can offer "Play in another app". Advertising and attribution SDKs may also receive limited information about installed apps for ad measurement and fraud prevention.
• Crash logs and diagnostics. This includes device model, OS version, app version, and error traces.
• Technical data. This includes IP address, device type, OS version, language, and network type, which are sent with network requests.

2. How we use information

We use this information to:

• provide and operate the App, including playing your streams, casting to your TV, and remembering your preferences;
• show ads that keep the App free, and measure how those ads perform;
• understand how the App is used and improve it (analytics);
• detect, investigate, and fix crashes and performance problems;
• prevent fraud, abuse, and invalid ad traffic, and keep the App secure;
• configure App features remotely (Firebase Remote Config);
• comply with legal obligations.

3. Third-party services

Ad consent. Where the law requires it (for example, in the EEA, the UK, and Switzerland), the App uses Google's User Messaging Platform to ask for your consent before showing personalized ads. To change your choice later, clear the App's storage (Android Settings → Apps → Castkoi → Storage → Clear storage) and the prompt will appear again the next time you open the App. You can also contact us at contact@tranquilmind.co. If you decline, you may still see non-personalized ads.

Advertising ID. You can reset your Advertising ID or opt out of personalized ads at any time. On Android, open Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device) and choose Reset advertising ID or Delete advertising ID.

Streams you open. When you play a stream, your device connects directly to the server that hosts it. That server may be your playlist provider, the broadcaster of a free news channel included in the App, or another third party. It receives your IP address and standard request data, including any Xtream login in the stream URL. We do not operate these servers, and their own privacy practices apply.

4. How we share information

• We do not sell your personal information for money.
• We share the information described above with the service providers and advertising partners listed in Section 3, so they can provide their services.
• Under some U.S. state laws (for example, California, Colorado, Virginia, and Connecticut), sharing identifiers with advertising partners for personalized ads may count as a "sale" or "sharing" of personal information, or as "targeted advertising". You can opt out as described in Sections 3 and 7.
• We may disclose information if the law requires it, to protect our rights, users, or the public, or as part of a merger, acquisition, or sale of assets.

5. Legal bases (EEA/UK — GDPR)

• Consent: for personalized advertising, and for analytics where consent is required. You can withdraw consent at any time.
• Legitimate interests: operating and securing the App, crash reporting, preventing fraud, and improving the App.
• Legal obligation: where we must process data to comply with the law.

6. Data retention

• Information stored on your device stays there until you delete it or uninstall the App.
• Our service providers keep analytics and advertising data according to their own retention settings. For example, Firebase Analytics keeps user-level data for the retention period set in our Firebase project, and advertising identifiers are kept according to each partner's policy.
• Crash reports are kept only as long as needed to diagnose and fix problems.

7. Your rights

Depending on where you live, you may have the right to:

• GDPR (EEA/UK): access, correct, or delete your data, receive a copy of it (portability), object to or restrict processing, withdraw consent, and complain to your local data protection authority.
• CCPA/CPRA and other U.S. state laws: know what personal information is collected, delete it, correct it, and opt out of its "sale"/"sharing" or of targeted advertising, without being treated differently for exercising these rights.
• Other regions (for example, Brazil's LGPD and Canada's PIPEDA): similar rights to access, correct, and delete your data.

How to make a request (including data deletion): email contact@tranquilmind.co. We do not use accounts, so please include your device's Advertising ID (and your Firebase installation ID, if you can find it). This helps us and our partners identify the data linked to your device. We will respond within the time the law requires. You can also stop all future collection by uninstalling the App, and delete on-device data by clearing the App's storage.

8. Children's privacy

The App is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal information from children under 13, or under the age of digital consent in your country (up to 16 in the EEA). If you believe a child has provided information through the App, contact us at contact@tranquilmind.co and we will delete it. The App includes an optional PIN lock that hides playlist categories labelled as adult. This lock works on category names and does not guarantee that all mature content is blocked.

9. International data transfers

We and our service providers may process information in countries other than yours, including Vietnam and the United States. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

10. Data security

Data sent by the App's SDKs is encrypted in transit using HTTPS/TLS. Some streams from your playlist provider may use unencrypted HTTP if the provider supplies them that way. We take reasonable measures to protect information, but no method of transmission or storage is 100% secure.

11. Third-party content

Castkoi is only a player. It does not host, provide, or control the content in the playlists you add, the free news channels it links to, or YouTube content. We are not responsible for the content, availability, or privacy practices of these third parties. Please review their policies.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy at this address with a new "Last updated" date. If you keep using the App after changes take effect, you accept the updated Policy.

13. Contact us

Tranquil Mind Technology JSC No. 3, Alley 98, Vu Trong Phung Street, Thanh Xuan Ward, Hanoi City, Vietnam Email: contact@tranquilmind.co